API Keys

Key values are encrypted at rest (AES-256-GCM) and never exposed in plaintext.